Debian Patches
Status for antiword/0.37-17
Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
---|---|---|---|---|---|---|
10_fix_buffer_overflow_wordole_c.patch | Add check for buffer overflow with malformed input files This was later re-found and became CVE-2014-8123. | <eriks@debian.org> | yes | debian | 2018-11-30 | |
50_antiword-manpage-hyphen-to-minus.patch | Fix hyphen in antiword.1 to be a minus | Olly Betts <olly@survex.com> | not-needed | 2025-04-18 | ||
docx.patch | Try to reduce confusion around docx files Now also checks for XML files and HTML files | Olly Betts <olly@survex.com> | not-needed | debian | 2025-04-18 | |
remove-dead-upstream-links.patch | Remove dead upstream links The cjb.net domain has been let lapse and is now a holding page. The winfield.demon.nl site is 404. |
Olly Betts <olly@survex.com> | not-needed | 2025-04-18 | ||
use-snprintf.patch | Use snprintf Use snprintf() when converting dates to strings to make completely sure we can't overrun the buffer. |
Olly Betts <olly@survex.com> | not-needed | 2025-04-18 | ||
stop-parsing-documentsummary.patch | Stop parsing the document summary information We were only reading two fields from it: "manager" (which is never actually used) and "company" (which is only used in the docbook XML export, where if set it was included in document metadata). Rather than try to fix buffer overreads in this code, it seems simpler to just excise it. |
Olly Betts <olly@survex.com> | not-needed | debian | vendor | 2025-04-18 |